# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=42 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 43 --- ## [Adding a global label for all metrics and logs coming from an agent policy](https://discuss.elastic.co/t/adding-a-global-label-for-all-metrics-and-logs-coming-from-an-agent-policy/322143)
**Author:** [@slogger](https://discuss.elastic.co/u/slogger)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 8:46pm UTC](https://discuss.elastic.co/t/adding-a-global-label-for-all-metrics-and-logs-coming-from-an-agent-policy/322143 "2023-01-04T20:46:46Z")
Hello I need to have a way to filter all the logs and metrics that come from all elastic agent (and integrations) with a certain policy. For example all dev metrics collected by the dev agents should have a lable: env:… --- ## [How to modify host status or agent status 5mins to 2 mins when its offline](https://discuss.elastic.co/t/how-to-modify-host-status-or-agent-status-5mins-to-2-mins-when-its-offline/322093)
**Author:** [@rakeshsid01](https://discuss.elastic.co/u/rakeshsid01)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 7:27pm UTC](https://discuss.elastic.co/t/how-to-modify-host-status-or-agent-status-5mins-to-2-mins-when-its-offline/322093 "2023-01-04T19:27:03Z")
How to modify host status or agent status 5mins to 2 mins when its offline. I have configured elastic agent service in windows. Please post snaps if possible --- ## [Issues with agent on windows service start loop](https://discuss.elastic.co/t/issues-with-agent-on-windows-service-start-loop/322250)
**Author:** [@pshilling](https://discuss.elastic.co/u/pshilling)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 7:14pm UTC](https://discuss.elastic.co/t/issues-with-agent-on-windows-service-start-loop/322250 "2023-01-04T19:14:46Z")
I installed the agent on my windows 10 test machine using the script generated from my fleet server. I used cmd run as administrator to run the installer. I seem to be stuck in a service start loop. The error logs show t… --- ## [Access is denied in case of elastic agent in Windows installation](https://discuss.elastic.co/t/access-is-denied-in-case-of-elastic-agent-in-windows-installation/322333)
**Author:** [@lovelike123](https://discuss.elastic.co/u/lovelike123)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 1:17am UTC](https://discuss.elastic.co/t/access-is-denied-in-case-of-elastic-agent-in-windows-installation/322333 "2023-01-04T01:17:34Z")
Access is denied in case of elastic agent in Windows installation Version of windows server：windows server 2008r2 --- ## [If mysql is remote, how do I configure it in elastic agent metricbeat ( help)](https://discuss.elastic.co/t/if-mysql-is-remote-how-do-i-configure-it-in-elastic-agent-metricbeat-help/322343)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 7:25am UTC](https://discuss.elastic.co/t/if-mysql-is-remote-how-do-i-configure-it-in-elastic-agent-metricbeat-help/322343 "2023-01-03T07:25:26Z")
Kibana version: 7.17.8 Elasticsearch version: 7.17.8 APM Server version: 7.17.8 APM Agent language and version: 7.17.8 Browser version: --- ## [How do I get Elasticsearch CA trusted thumbprint](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-ca-trusted-thumbprint/322270)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 3:53am UTC](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-ca-trusted-thumbprint/322270 "2023-01-03T03:53:49Z")
--- ## [Iptables intergrations Processors](https://discuss.elastic.co/t/iptables-intergrations-processors/321289)
**Author:** [@david-a76](https://discuss.elastic.co/u/david-a76)\ **Replies:** 1\ **Last updated:** [December 30, 2022, 7:52pm UTC](https://discuss.elastic.co/t/iptables-intergrations-processors/321289 "2022-12-30T19:52:52Z")
I wourd like to add a field when source ip is one of 192.168.100.0/24 or 172.17.100.0/24 subnet So i added this precocessor in iptables integration field on my agnet policy but It's totaly ignored. That's wrong with … --- ## [About Sending Logs from External SIEM (include ArcSight, Qradar, Splunk, ELK...) to Receiver Elastic Agent or Logstash with method TCP/UDP](https://discuss.elastic.co/t/about-sending-logs-from-external-siem-include-arcsight-qradar-splunk-elk-to-receiver-elastic-agent-or-logstash-with-method-tcp-udp/322139)
**Author:** [@Louis\_Wales](https://discuss.elastic.co/u/Louis_Wales)\ **Replies:** 4\ **Last updated:** [December 30, 2022, 3:45am UTC](https://discuss.elastic.co/t/about-sending-logs-from-external-siem-include-arcsight-qradar-splunk-elk-to-receiver-elastic-agent-or-logstash-with-method-tcp-udp/322139 "2022-12-30T03:45:10Z")
Hi everyone, I have a question when should I use TCP, and when should I use UDP to forward logs? Or is it better to use TCP or UDP? The situation is about Sending Logs from External SIEM (include ArcSight, Qradar, Splun… --- ## [System test failing for Policy having variable definition outside Policy Templates](https://discuss.elastic.co/t/system-test-failing-for-policy-having-variable-definition-outside-policy-templates/322028)
**Author:** [@Alex\_R](https://discuss.elastic.co/u/Alex_R)\ **Replies:** 0\ **Last updated:** [December 27, 2022, 8:59am UTC](https://discuss.elastic.co/t/system-test-failing-for-policy-having-variable-definition-outside-policy-templates/322028 "2022-12-27T08:59:38Z")
Hi Team! I am working on one of the integrations in which I have defined one variable in the main manifest (package level) in such a fashion. vars: - name: instance\_url type: text title: Instance URL requ… --- ## [How do you handle Elastic Agent Policies and Integrations that only apply to some systems?](https://discuss.elastic.co/t/how-do-you-handle-elastic-agent-policies-and-integrations-that-only-apply-to-some-systems/322168)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [December 29, 2022, 4:15pm UTC](https://discuss.elastic.co/t/how-do-you-handle-elastic-agent-policies-and-integrations-that-only-apply-to-some-systems/322168 "2022-12-29T16:15:09Z")
Hi All, This is more of a general question looking for input from others how they handle Elastic Agent policies when there is an integration that only needs to be deployed to a subset of systems. General concept of my … --- ## [MYSQL Integration using elasticagent mysql performance metrics cause metricbeat crashes : Agent V8.5.0](https://discuss.elastic.co/t/mysql-integration-using-elasticagent-mysql-performance-metrics-cause-metricbeat-crashes-agent-v8-5-0/322081)
**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\ **Replies:** 3\ **Last updated:** [December 29, 2022, 12:09pm UTC](https://discuss.elastic.co/t/mysql-integration-using-elasticagent-mysql-performance-metrics-cause-metricbeat-crashes-agent-v8-5-0/322081 "2022-12-29T12:09:12Z")
I'm using prebuild elastic integration to fetch mysql metrics and logs. I'm able to fetch mysql status metrics and agent running healthy. But when I enable MySQL performance metric it will become unhealthy and I got er… --- ## [Unhealthy status yet sending events - agent via logstash](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801)
**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\ **Replies:** 6\ **Last updated:** [December 28, 2022, 3:21pm UTC](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801 "2022-12-28T15:21:04Z")
We have converted an agent policy to use the Logstash ingest path instead of direct to the cluster. Events are being received by the logstash, and they appear in Elastic, so the end to end path is working ok. However t… --- ## [Policy Assignation](https://discuss.elastic.co/t/policy-assignation/320917)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 1\ **Last updated:** [December 26, 2022, 6:21pm UTC](https://discuss.elastic.co/t/policy-assignation/320917 "2022-12-26T18:21:34Z")
Hi there! I would like to understand something related to elastic agents. When I have two agents enrolled with the same policy, is the ingestion automatically balanced depending on the agent's available resources, or do… --- ## [Elastic Agent and Snort of integations](https://discuss.elastic.co/t/elastic-agent-and-snort-of-integations/321952)
**Author:** [@learning\_deep](https://discuss.elastic.co/u/learning_deep)\ **Replies:** 2\ **Last updated:** [December 24, 2022, 10:12am UTC](https://discuss.elastic.co/t/elastic-agent-and-snort-of-integations/321952 "2022-12-24T10:12:47Z")
I have installed Elastic Agent and Snort of integations and Elastic Stack. But it seems that Snort of integations just receive .log format files? I find my snort only have txt files. Can someone help me? How should i con… --- ## [Elastic Agent, Ingest pipeline processing fields](https://discuss.elastic.co/t/elastic-agent-ingest-pipeline-processing-fields/321629)
**Author:** [@searchtastic](https://discuss.elastic.co/u/searchtastic)\ **Replies:** 2\ **Last updated:** [December 22, 2022, 4:40pm UTC](https://discuss.elastic.co/t/elastic-agent-ingest-pipeline-processing-fields/321629 "2022-12-22T16:40:51Z")
I apologise if this is a silly question. I have been reading the documentation and trying to understand how to use the ingest pipelines to get my data into fields. I have had some success, However I have become stuck wit… --- ## [Error extracting container ID when using Fleet-managed Docker integration](https://discuss.elastic.co/t/error-extracting-container-id-when-using-fleet-managed-docker-integration/321795)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [December 22, 2022, 3:37pm UTC](https://discuss.elastic.co/t/error-extracting-container-id-when-using-fleet-managed-docker-integration/321795 "2022-12-22T15:37:32Z")
I am attempting to monitor docker container logs and metrics using the Fleet-managed Docker integration with Elastic Agent. The metrics are ingesting as expected, however logs are not being ingested as expected. I've val… --- ## [Fleet server with update status](https://discuss.elastic.co/t/fleet-server-with-update-status/321799)
**Author:** [@thiavs](https://discuss.elastic.co/u/thiavs)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 9:32pm UTC](https://discuss.elastic.co/t/fleet-server-with-update-status/321799 "2022-12-21T21:32:56Z")
Hello, After updating kibana to version 8.5.0, I'm facing a bug in the visualization of the elastic-agent on the fleet server, as you can see below, it has the status of updating, this agent was inserted right after the… --- ## [Fleet output settings](https://discuss.elastic.co/t/fleet-output-settings/319836)
**Author:** [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\ **Replies:** 1\ **Last updated:** [December 22, 2022, 10:14am UTC](https://discuss.elastic.co/t/fleet-output-settings/319836 "2022-12-22T10:14:08Z")
While debugging my self managed fleet server I came accross this discussion: This discussion mentions the is\_default\_monitoring amongst xpack.fleet.outputs parameters but I see no other mention of it in the documenta… --- ## [Cisco ISE Netflow Error](https://discuss.elastic.co/t/cisco-ise-netflow-error/321510)
**Author:** [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 10:00pm UTC](https://discuss.elastic.co/t/cisco-ise-netflow-error/321510 "2022-12-21T22:00:14Z")
I installed "Cisco Ise Integration" in Kibana And Elastic Agent setting + "Cisco Ise Netflow" Output is completed Cisco ise -\> ELK TCP Session Established (Also Sending Packet Check) But.... Kibana Dashboar… --- ## [Fleet server loading slowly](https://discuss.elastic.co/t/fleet-server-loading-slowly/321108)
**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 9:15am UTC](https://discuss.elastic.co/t/fleet-server-loading-slowly/321108 "2022-12-21T09:15:57Z")
Hi, I came across a strange issue. My Fleet server is permamently loading. After ten minutes it pops up but there are other issues. This is what I see for 4 - 10 minutes every time: My Elastick stack is v 8.5.1. The… --- ## [Elastic Agent 8.5.3 Logging](https://discuss.elastic.co/t/elastic-agent-8-5-3-logging/321732)
**Author:** [@zirota](https://discuss.elastic.co/u/zirota)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 8:24am UTC](https://discuss.elastic.co/t/elastic-agent-8-5-3-logging/321732 "2022-12-21T08:24:42Z")
Hello, I am facing some difficulties in configuring the agent log path when running in standalone mode. Agent Version: 8.5.3 Distribution: linux\_x86-64 Config: Startup command: ./elastic-agent -run -c \ **Author:** [@OscarFilho](https://discuss.elastic.co/u/OscarFilho)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 1:36pm UTC](https://discuss.elastic.co/t/monitor-uptime-with-telnet/321654 "2022-12-20T13:36:02Z") We are using Elastic Cloud to monitor our company's services. Today I installed a private location type monitor that is located in our company's on-premises environment. I would like some help and know if it is possibl… --- ## [Elastic Agent enrollment steps fail to change 'state' file url from 443 to 9243](https://discuss.elastic.co/t/elastic-agent-enrollment-steps-fail-to-change-state-file-url-from-443-to-9243/321600)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 8:43pm UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-steps-fail-to-change-state-file-url-from-443-to-9243/321600 "2022-12-19T20:43:58Z")
Elastic Cloud Enterprise 3.5 Deployment Version 7.17.8 Elastic Agent Version 7.17.8 Elastic Agent enrollment steps fail to change 'state' file output section url from 443 to 9243 I started going through the Elastic A… --- ## [Agent doesn't see binary upgrades in air gapped env](https://discuss.elastic.co/t/agent-doesnt-see-binary-upgrades-in-air-gapped-env/321312)
**Author:** [@nkormakov](https://discuss.elastic.co/u/nkormakov)\ **Replies:** 1\ **Last updated:** [December 19, 2022, 7:23pm UTC](https://discuss.elastic.co/t/agent-doesnt-see-binary-upgrades-in-air-gapped-env/321312 "2022-12-19T19:23:15Z")
I'm trying to set up air gapped environment, but for some reason i cannot upgrade Agent I've put in the settings my local repo as default https://registry.smth.smth/downloads/ and for testing added second non-default … --- ## [User login details - System integration](https://discuss.elastic.co/t/user-login-details-system-integration/321529)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 7:51am UTC](https://discuss.elastic.co/t/user-login-details-system-integration/321529 "2022-12-19T07:51:22Z")
Hello, I am using Elastic agent 7.17.4 on windows PC to monitor the metrics and logs. One of the requirements is to visualize the users' login and logout time like the below table. Image 1 But what is possible usi… --- ## [Fleet error kibana](https://discuss.elastic.co/t/fleet-error-kibana/321263)
**Author:** [@limitless](https://discuss.elastic.co/u/limitless)\ **Replies:** 0\ **Last updated:** [December 15, 2022, 7:14am UTC](https://discuss.elastic.co/t/fleet-error-kibana/321263 "2022-12-15T07:14:10Z")
// {"log.level":"info","@timestamp":"2022-12-15T11:42:25.572+0500","log.origin":{"file.name":"cmd/enroll\_cmd.go","file.line":403},"message":"Generating self-signed certificate for Fleet Server","ecs.version":"1.6.0"} Er… --- ## [Set op\_type to "index" filebeat / elastic-agent](https://discuss.elastic.co/t/set-op-type-to-index-filebeat-elastic-agent/321562)
**Author:** [@beijo](https://discuss.elastic.co/u/beijo)\ **Replies:** 7\ **Last updated:** [December 19, 2022, 5:06pm UTC](https://discuss.elastic.co/t/set-op-type-to-index-filebeat-elastic-agent/321562 "2022-12-19T17:06:52Z")
Hi All, I'm ingesting documents into an index (not a data stream). As I need to update specific documents, I created an ingest pipline which sets the \_id field. However I can not see my documents being updated and I sus… --- ## [Elastic SIEM Detection Rules + Windows Logs in French?](https://discuss.elastic.co/t/elastic-siem-detection-rules-windows-logs-in-french/321563)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 1:26pm UTC](https://discuss.elastic.co/t/elastic-siem-detection-rules-windows-logs-in-french/321563 "2022-12-19T13:26:09Z")
Hello, I'm installing Elastic Agent on many endpoints, I also add the Windows Logs integration and enable Elastic Security detection rules for Windows. Some endpoints have French logs, and I see that the searches for th… --- ## [Exclude file types/extensions with Agent Policy](https://discuss.elastic.co/t/exclude-file-types-extensions-with-agent-policy/321326)
**Author:** [@cmminear](https://discuss.elastic.co/u/cmminear)\ **Replies:** 0\ **Last updated:** [December 15, 2022, 3:56pm UTC](https://discuss.elastic.co/t/exclude-file-types-extensions-with-agent-policy/321326 "2022-12-15T15:56:31Z")
I am trying to recusively include a bunch of folders for logs but exclude a few extensions/file types and missing any documentation specific for the agents to do this. I want to get all logs in all folder from /cgilo… --- ## [Statuspage.io integration](https://discuss.elastic.co/t/statuspage-io-integration/321218)
**Author:** [@javaripa](https://discuss.elastic.co/u/javaripa)\ **Replies:** 0\ **Last updated:** [December 14, 2022, 1:06pm UTC](https://discuss.elastic.co/t/statuspage-io-integration/321218 "2022-12-14T13:06:40Z")
Is it possible to integrate Elastic stack with Statuspage? As far as I know, Elastic seems to use Statuspage.io already! ESS (Public) Status [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=41) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=43)